dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.13-debian-fips-dev, 1.34.13-debian13-fips-dev, 1.34.13-fips-dev, v1.34.13-fips-dev
sha256:6cc650e48120ccd80bde2e7c9a4b9c3366f34980a0bd552bc58e20185856bffc
Manifest digest:sha256:7211c9c8129b4d76cb3be6b264fa5e64d98449a131d728b35e4bd41c7b8cee56
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:50548cb42748d68423f1d96f61248216bbafb06548b0360b099df6b8ec7ced88 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:2800607a7d2a26eb27f6d8c2bee41ea7255c6c85b59fcb3cbb4102e937a51907 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-proxy@sha256:4a348501ad22a3218813c79cf9132d03f84abe712a743b30d4dd7b87ac1a0d21 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:329e266ecb9be1b0d56e3e79380b0d1eab8c71e2c8bff198a5a9f947b9664a00 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-proxy@sha256:d127fa39bc8c25b48ef26cc993cc9f442d701e0d314153968e3033ecd640f98b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:89ac6f004a06226ef7597faa6e4107c014554e1e0c9b342f61ad80490eed4cd7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:5fbb373b434953095534b3d46fdd5e3440e02f6ddb26ee7b1b0746a5b9c585a9 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:6df7d6a8752d7c3c3d1b1fdf2ca049078b4cc7408386a056c2af7cea7eb67406 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:d071e613e9f3c8ba34ea9f09c975130063f8e014d9482bc59ebaeffb373fa05f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:be9837726534a910a64af76ebee964be962a1e3915a58b4638ac7196ed4b8a12 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:cd51958b5e63773fa7197119864796904a213a7df4d6901fc090f2a171f619c3 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:f84520521dbb99139dd7ad68c04b968639498a00ab2fc87e60620697b68bdca9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:3b5ef3b32923aed79c022c12f21c0ae05e27007c6ab4009178da9835920d6964 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:80f39c4369a2de924bbaef3119e7087a25083edc0623973e0ba0311da29ffa15 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:3cff57011b396f4b729d70df0a02f66dd450e5100c510666e7b64593e15230d6 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:091d03041988eb91ef70790488e75aed8f096bd1b399e9ce1e967e7d7a5c673b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:7f949b64a3df0c6ef032b54bee1517a93b12fe6b594cb8ff229181d95730a48d |